PRIVACY POLICY
This Privacy Policy (“Privacy Policy”) describes how information obtained from consumers, including visitors to the www.carlsjr.com website (“Website”), Carl’s Jr. mobile application (“Application”), and Carl’s Jr. company-owned and franchised-locations, where applicable (“Locations”) is collected, used, and disclosed by Carl’s Jr. Restaurants LLC and its parents, subsidiaries, franchisees and affiliates, and their respective stockholders, directors, officers, employees, agents, successors and assigns (collectively, “Carl’s Jr.,” “we,” “us,” or “our”). This Policy also explains how you can exercise certain privacy rights.
1. Definition of Personal Information
“Personal Information” means information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly with a particular visitor or consumer and which is submitted to and/or collected by the Website and maintained by Carl’s Jr. in an accessible form, and includes information actively submitted by you and passively collected information, as described below.
2. Categories of Personal Information Collected
We collect a variety of categories of Personal Information about consumers, their household, and/or their devices from both online and offline sources. We will not collect additional categories of Personal Information or use the Personal Information we collect for materially different, unrelated, or incompatible purposes without providing advance notice.
We have obtained the Personal Information listed above from the following sources:
- Directly from you. For example, from forms you complete on our Website or the purchase of products such as food or gift cards.
- Indirectly from you. For example, through your interaction on our Website, our Application, or with our advertisers.
3. Cookies
To provide you with a more relevant and interesting experience, we may participate in behavioral-based advertising. This means that Carl’s Jr. and/or one of our vendors may place a cookie on your browser, or use a web beacon, to collect information about your use of our Website so that Carl’s Jr. and/or a third party can provide advertising about products and services tailored to your interest (including, without limitation, products and services offered by Carl’s Jr. and its affiliates). These ad servers or ad networks use technology to the advertisements and links that appear on the Website sent directly to your browser. They automatically receive your IP address when this occurs. Other technologies (such as cookies, JavaScript, or web beacons) may also be used by the third-party ad networks to measure the effectiveness of their advertisements and/or to personalize the advertising content that you see. Carl’s Jr. has no access to or control over these cookies that are used by third-party advertisers. You should consult the respective privacy policies of these third-party ad servers for more detailed information on their practices as well as for instructions about how to opt-out of certain practices. This Privacy Policy does not apply to, and Carl’s Jr. cannot control the activities of, such other advertisers or websites.
When you view this site, Carl’s Jr. may temporarily store some information on your computer. This information may be in the form of “cookies” or other web beacons to store information about visitors’ preferences, to record user-specific information on which pages a visitor accesses or visits, and customize web page content based on visitors’ browser types or other information that a visitor sends via their browser or other means. Passive information collection technologies such as cookies can make your use of the Website easier by allowing Carl’s Jr. to provide better service, customize web pages based on consumer preferences, compile statistics, analyze trends, and otherwise administer and improve the Website. To opt-out of these cookies, visit our cookie settings here.
4. Google Analytics
Carl’s Jr. has implemented certain features of Google Analytics advertising features for the Website, including Remarketing with Google Analytics, Google Display Network Impression Reporting, Google Analytics Demographics and Interest Reporting and Integrated services that require Google Analytics to collect data via advertising cookies and anonymous identifiers. As a part of these programs, Google, as a third party vendor, makes use of certain cookies and anonymous identifiers to serve ads on the Website and to provide certain behavioral, demographic and interest data with third parties. Google’s use of these cookies enables it to serve ads to users based on their visit to the Website and other sites on the Internet.
Users may opt out of the use of the Google Analytics advertising features through Google Ads Settings (see https://www.google.com/settings/ads/plugin), Google Ad Settings for mobile apps, the Google Analytics Opt-out Browser Add-on (available at https://tools.google.com/dlpage/gaoptout/), or through our online portal here.
5. Your Rights
Various jurisdictions provide certain rights regarding information that is treated as Personal Information under the respective data privacy law. Only you, or someone you legally authorize to act on your behalf, may make a request related to your Personal Information. We will only use the Personal Information provided in your request to process your request, including to verify your identity or that of your authorized agent. We cannot provide any Personal Information in response to a request if we cannot verify your or your authorized agent’s identity, or your authorized agent’s authority to make the request on your behalf, and/or if we cannot confirm that the collected Personal Information relates to you.
See the “Methods for Submitting Requests to Carl’s Jr.” section below for information on how you can exercise your rights related to your Personal Information.
- The right to know what categories of Personal Information are being collected, sold, shared, or disclosed and the categories of sources of that Personal Information.
You have the right to know what categories of Personal Information we collect, sell, share, or disclose about you, our business or commercial purposes for collecting, selling, sharing, or disclosing Personal information, the categories of recipients to which we sell or share Personal Information, the categories of Personal Information that we disclosed for each category identified, the categories of recipients to which we disclosed that particular category of Personal Information, and the categories of sources of that Personal Information. These categories are described below in the “Categories of Personal Information Collected” and “How We Disclose, Share, and Sell Personal Information” sections below.
- The right to access collected Personal Information
You have the right to confirm whether we are processing your Personal Information, to access your Personal Information, and to obtain a copy of Personal Information you provided to us in a portable format. See the “Methods for Submitting Requests to Carl’s Jr.” section below for information on how you can exercise your right to access collected Personal Information.
- The right to correct inaccurate Personal Information
If you believe that the Personal Information, we maintain about you is inaccurate, you have the right that we correct that information.
See the “Methods for Submitting Requests to Carl’s Jr.” section below for information on how you can exercise your right to corrected Personal Information.
- The right to request deletion of Personal Information
Subject to certain exceptions, you have the right to request that we delete Personal Information we have collected or maintained. Once we receive and verify your request, we will delete and instruct any applicable service providers to delete your Personal Information from our records, unless an exception applies.
See the “Methods for Submitting Requests to Carl’s Jr.” section below for information on how you can exercise your right to delete collected Personal Information.
- The right to opt-out of the sale and sharing of Personal Information
Some jurisdictions provide you with the right to opt-out of the “sale” of your Personal Information, and to request that we do not share your Personal Information for cross-context behavioral advertising. To opt-out, please click here.
- The rights of consumers who are less than 16 years of age
We do not sell or share the personal information of consumers who we actually know are less than 16 years of age (or any consumers).
- Right to object to certain processing
You may object to our use or disclosure of your personal information by contacting us at the address described below.
- The right to be free from discrimination
You have the right to equal service, and we will not discriminate against you if you exercise your rights. However, under certain circumstances, we may offer you special discounts or other incentives for the right to continue to collect, use, or sell your Personal Information; please see “Financial Incentive Offers” described below.
- Right to appeal
Sometimes we are unable to process requests relating to your Personal Information, in which case, your request will be denied. If your privacy rights request has previously been denied by us and you believe we denied it in error, you may appeal for reconsideration of your request using our webform here.
Online tracking
We do not currently recognize the “Do Not Track” signal.
6. How Long We Keep Consumers’ Personal Information
We keep the categories of Personal Information described above for as long as is necessary for the purposes described in this Privacy Policy or otherwise authorized by law. This generally means holding the information for as long as one of the following apply:
- Your Personal Information is reasonably necessary to manage our operations, to manage your relationship with us, or to satisfy another purpose for which we collected the information;
- Your Personal Information is reasonably necessary to carry out a disclosed purpose that is reasonably compatible with the context in which the Personal Information was collected;
- The Personal Information is reasonably required to protect or defend our rights or property (which will generally relate to applicable laws that limit actions in a particular case); or
- We are otherwise required or permitted to keep your Personal Information by applicable laws or regulations.
Where Personal Information is used for more than one purpose, we will retain it until the purpose with the latest period expires. For more information about our retention policies, please contact us using the contact details below.
7. How We Disclose, Share, and Sell Personal Information
We disclose Personal Information to our service providers and contractors for business or commercial purposes as described below. Although we do not sell Personal Information in exchange for money, some of our advertising practices may be classified as “sharing” under California law.
- Affiliates and Acquisitions. We may share information with our corporate affiliates (e.g., parent company, sister companies, subsidiaries, joint ventures, or other companies under common control). If another company acquires, or plans to acquire, our company, business, or our assets, we will also share information with that company, including at the negotiation stage.
- Other Disclosures without Your Consent. We may disclose information in response to subpoenas, warrants, or court orders, or in connection with any legal process, or to comply with relevant laws. We may also share your information in order to establish or exercise our rights, to defend against a legal claim, to investigate, prevent, or take action regarding possible illegal activities, suspected fraud, safety of person or property, or a violation of our policies, or to comply with your request for the shipment of products to or the provision of services by a third-party intermediary.
- Public. Some of our Websites may provide the opportunity to post comments, or reviews, in a public forum. If you decide to submit information on these pages, that information may be publicly available.
- Partner Promotion. We may offer contests, sweepstakes, or other promotions with third party partners. If you decide to enter a contest, sweepstakes, or promotion that is sponsored by a third party partner the information that you provide will be shared with us and with them. Their use of your information is not governed by this privacy policy.
- Service Providers. We may share your information with service providers. Among other things service providers may help us to administer our Website, conduct surveys, provide technical support, process payments, and assist in the fulfillment of orders.
- Other Disclosures with Your Consent. We may disclose your information to other third parties when we have your consent or direction to do so.
Note that any third party with whom we share user data will provide the same or equal protection of user data as stated in this privacy policy.
We disclose the categories of Personal Information to the recipients described above for the following business purposes:
- Processing your purchases of or requests for products or services
- Performing services (including processing, maintaining, or collecting Personal Information) on our behalf (e.g., processing payments, supporting our promotions, contests, gift cards or loyalty programs, and providing communications, technical, analytical, web hosting, cloud hosting and mobile application support, or other services on our behalf)
- Auditing related to ad impressions
- Ensuring security and integrity of Personal Information
- Debugging to identify and repair errors that impair existing intended functionality
- Short-term, transient use, including, but not limited to, non-personalized advertising
- Providing advertising and marketing services (except for cross-context behavioral advertising)
- Undertaking internal research for technological development and demonstration
- Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us
- Detecting or protecting against malicious, deceptive, fraudulent or illegal activity
8. Methods for Submitting Requests to Carl’s Jr.
You have the right to submit a verifiable request to us using the following methods:
- ONLINE REQUEST FORM. You may submit a request to via our Consumer Portal located on our privacy page here.
- TOLL-FREE TELEPHONE CALL. You may submit requests by calling our toll-free Request Hotline at 1-800-227-5757. A member of our team will acknowledge your request and guide you through the verification process.
9. Verification Process
Please note that, if you submit a request to know, request to delete, or request to correct, you will be asked to log into your account or to provide 2-3 pieces of Personal Information that we will match against our records to verify your identity. We may use the following information for verification purposes:
- Your first and last name
- Your e-mail address
- Your telephone number
Depending on the request that you may, we may require you to provide a signed declaration affirming your identity (or your authorized agent’s identity, if applicable).
10. Authorized Agents
An authorized agent is either a natural person or a business entity registered with the California Secretary of State that a consumer has authorized to act on his or her behalf.
You may use an authorized agent to submit a request on your behalf. Your agent will need to provide: either (1) a power of attorney; or (2) your written permission to allow the authorized agent to submit the request on your behalf and verification of your identity.
11. Accessibility
You may be able to enable accessibility features on our Site to make this Privacy Policy more accessible to you. You may also contact us using the information herein to request an alternate format of this Privacy Policy.
12. Security of Personal Information
Carl’s Jr. makes an effort to ensure that Personal Information is protected while you are on the Website. However, the confidentiality of Personal Information transmitted over the Internet cannot be guaranteed. We urge you to exercise caution when transmitting Personal Information over the Internet. In the event that we are required by law to inform you of a breach to your personal information we may notify you electronically, in writing, or by telephone, if permitted to do so by law.
13. Changes to This Privacy Policy
We may change our privacy policy and practices over time. To the extent that our policy changes in a material way, the policy that was in place at the time that you submitted personal information to us will generally govern that information unless we receive your consent to the new privacy policy. Our privacy policy includes an “effective” and “last updated” date. The effective date refers to the date that the current version took effect. The last updated date refers to the date that the current version was last substantively modified.
14. Notice to Nevada Residents
Nevada law allows consumers to direct certain businesses not to sell their Personal Information to third parties to license or sell that information to additional third parties. If you are a Nevada resident, you may submit such opt-out request through our webform at http://privacy.ckr.com. To be effective, your request must include your full name, address, phone number, and email address.
15. Additional Information for California Residents
Financial Incentive Program
You have the right to receive equal service and price and not be discriminated against if you exercise any of your CCPA rights. However, from time to time we may offer certain financial incentives, as permitted by the CCPA that can result in different prices, rates, or quality levels of our products and/or services. Any CCPA-permitted financial incentive we offer will reasonably relate to your Personal Information’s value and contain written terms that describe the program’s material aspects. Participation in a financial incentive program requires your prior opt-in consent, which you may revoke at any time.
Summary of Financial Incentives Offered.
From time to time, Carl’s Jr. offers coupons, specials, and other discounts to consumers who have opted-in to receive marketing material from us by providing us with certain Personal Information. Consumers may also participate in our free loyalty/rewards program – the Carl’s Jr. My Rewards program (the “Program”). You will be enrolled in the Program only after you provide prior opt-in consent. Participation in the Program gives consumers the opportunity to accrue points to earn food items with qualifying purchases. The Program collects and retains members’ Personal Information in order to keep track of the points you have accrued and/or purchases you have made.
Material Terms of Financial Incentives.
When we offer a financial incentive or participation in our Program, the offer will include an explanation of the material terms of the incentive. The nature and value of any such offer or financial incentive may differ depending on what information we collect and use and whether you choose to enroll in the Program. Whether you consent to the financial incentive and/or to enroll in our Program and whether you choose to allow us to collect and use other types of Personal Information about you affects how we communicate with you and the types and frequency of offers that you may receive. Most financial incentives that we offer, and the Program will involve one or more of the following categories of Personal Information:
Name, email address, zip code, password, birthday, order history, purchase history, and physical address.
How to Provide Opt-In Consent to Financial Incentive.
Participation in our financial incentive and Program requires your prior opt-in consent. You can opt-in to participate in the financial incentives or Program by checking the box agreeing to the Program’s Terms and Conditions and our Privacy Policy when you sign up for the Program or otherwise indicate your consent when you request information from us.
How to Revoke/Withdraw Consent to Financial Incentive.
You make revoke your consent to any financial incentive (or opt-out) at any time by emailing us at [email protected].
Please note that if you are a California consumer and submit a CCPA-related deletion request, we will ask you to confirm that you want to terminate your Program membership (and My Rewards account). If you choose to retain your Program membership, Carl’s Jr. will continue to use your personal information to provide the Program and related services or as otherwise permitted by applicable law.
Value of California Consumers’ Personal Information.
We do not assign a monetary value to the Personal Information that we collect and strive to only use that information to further our business in accordance with this Policy. To the extent that we are required to assign a monetary value to your Personal Information, it is equal to the value of the discount or financial incentive that we have provided to you.
California Shine the Light Law
Subject to certain limits under California Civil Code section 1798.83, California residents may ask Carl’s Jr. to provide them with (i) a list of certain categories of personal data that we have disclosed to third parties for their direct marketing purposes during the immediately preceding calendar year, and (ii) the identity of those third parties. California residents may make one request per calendar year.
To make this request, you may contact Carl’s Jr. at the mail or email address listed in the “Contact Us for More Information” section below. In your request, please state that you are a California resident and provide a current California address for our response. Please allow up to thirty (30) days for a response. Carl’s Jr. reserves its right not to respond to such requests submitted to addresses other than those specified in the “Contact Us for More Information” section below.
California Notice of Collection
The table below describes the categories of personal information we collect, disclose for a business purpose, “sell” and/or “share” (as those terms are defined by California law). Please note, in addition to the recipients identified below, we may disclose any of the categories of personal information we collect with government entities, as may be needed to comply with law or prevent illegal activity. We do not “sell” your personal information for money. As discussed elsewhere in the Privacy Policy, we use cookies and similar tracking technologies for purposes of targeted advertising.
Category | Examples | Purposes for Collection | Disclosure for a Business Purpose | Information Sold or Shared |
Identifiers | Name, alias, address, telephone email, unique personal identifier, account name, online identifier, IP address, or other similar identifiers | To process your requests and provide our products and services. To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses. To personalize your Website and Application experience and to deliver content and product and service offerings relevant to your interests, including targeted offers and ads through our Website and/or Application, third-party sites, and via email or text message. To create and manage Customer Accounts and administer your participation in our programs, services and other offerings. To prevent fraud or to respond to law enforcement requests and as required by applicable law, court order, or governmental regulations. To protect the rights and interests of us and/or our independently owned and operated franchisees, such as to resolve any disputes, to enforce this Policy or any other policy, to protect the rights or property of others, or to prevent harm. To evaluate prospective franchisees of ours. As described to you when collecting your personal information. | Our affiliates (including Hardee’s Restaurants LLC) and parent company and its and their respective franchisees and our service providers that support our business operations. | Third parties may include Third-party advertising and analytics partners.
|
Personal Information categories listed in the California Customer Records statute (Cal. Civ. Code § 1797.80(e)) | A name, address, telephone number, credit card number, debit card number, or any other financial information. Some personal information included in this category may overlap with other categories. | To process your requests and provide our products and services. To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses. To personalize your Website and Application experience and to deliver content and product and service offerings relevant to your interests, including targeted offers and ads through our Website and/or Application, third-party sites, and via email or text message. To create and manage Customer Accounts and administer your participation in our programs, services and other offerings. Detecting, investigating, or protecting against malicious, deceptive, fraudulent or illegal activity. To respond to reviews, comments, or other feedback you provide us. To evaluate prospective franchisees of ours. | Our affiliates (including Hardee’s Restaurants LLC) and parent company and its and their respective franchisees and our service providers that support our business operations. | Third parties may include Third-party advertising and analytics partners.
|
Commercial information | Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. | To process your requests and provide our products and services. To personalize and develop our Website, Application, products, and services. To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses. To personalize your Website and Application experience and to deliver content and product and service offerings relevant to your interests, including targeted offers and ads through our Website and/or Application, third-party sites, and via email or text message. To prevent fraud or to respond to law enforcement requests and as required by applicable law, court order, or governmental regulations. To protect the rights and interests of us and/or our independently owned and operated franchisees, such as to resolve any disputes, to enforce this Policy or any other policy, to protect the rights or property of others, or to prevent harm. To respond to reviews, comments, or other feedback you provide us. As described to you when collecting your personal information. | Our affiliates (including Hardee’s Restaurants LLC) and parent company and its and their respective franchisees and our service providers that support our business operations. | Third parties may include Third-party advertising and analytics partners.
|
Internet or similar network activity | Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement. interaction with our ChatBot | To process your requests and provide our products and services. To create and manage Customer Accounts and administer your participation in our programs, services and other offerings. For auditing, research, analysis and development, including to maintain and improve our Site, products, and services, and for other internal business purposes To personalize your Website and Application experience and to deliver content and product and service offerings relevant to your interests, including targeted offers and ads through our Website and/or Application, and third-party sites. To prevent fraud or to respond to law enforcement requests and as required by applicable law, court order, or governmental regulations. As described to you when collecting your personal information. | Our affiliates (including Hardee’s Restaurants LLC) and parent company and its and their respective franchisees and our service providers that support our business operations. | Third parties may include Third-party advertising and analytics partners.
|
Geolocation data | Physical location or movements | To facilitate locating the Carl’s Jr. location nearest to you. To identify nearby restaurants, mobile order fulfillment and estimating mobile order pickup or delivery time. For auditing, research, analysis and development, including to maintain and improve our Website, Application, products, and services, and for other internal business purposes To personalize your Website and Application experience and to deliver content and product and service offerings relevant to your interests, including targeted offers and ads through our Website and/or Application, and third-party sites. Detecting, investigating, or protecting against malicious, deceptive, fraudulent or illegal activity. As described to you when collecting your personal information. | Our affiliates (including Hardee’s Restaurants LLC) and parent company and its and their respective franchisees and our service providers that support our business operations. | N/A |
Sensory data | Record phone calls and CCTV recordings | To provide you with support and to respond to your inquiries, including customer service to you. To process your requests and provide our products and services. To communicate with you. For auditing, research, analysis and development, including to maintain and improve our Site, products, and services, and for other internal business purposes. To prevent fraud or to respond to law enforcement requests and as required by applicable law, court order, or governmental regulations. To protect the rights and interests of us and/or our independently owned and operated franchisees, such as to resolve any disputes, to enforce this Policy or any other policy, to protect the rights or property of others, or to prevent harm. As described to you when collecting your personal information. | Our affiliates (including Hardee’s Restaurants LLC) and parent company and its and their respective franchisees and our service providers that support our business operations. | N/A |
Sensitive Personal Information
In particular, we have collected the types of Sensitive Personal Information indicated in the chart below:
Category of Sensitive Personal Information | Sources | Purposes for Collection |
Personal Information that reveals a consumer’s precise geolocation (location within a radius of 1,850 feet) | Indirectly from you | To facilitate locating the Carl’s Jr. location nearest to you, for mobile order fulfillment and estimating mobile order pickup or delivery time. For marketing and advertising. For auditing, research, analysis and development, including to maintain and improve our Website, Application, products, and services, and for other internal business purposes. To personalize your Website and Application experience and to deliver content and product and service offerings relevant to your interests, including targeted offers and ads through our Website and/or Application, and third-party sites. Detecting, investigating, or protecting against malicious, deceptive, fraudulent or illegal activity. As described to you when collecting your personal information. |
16. Contact Us for More Information
Consumers who have questions or concerns about our privacy policies and practices may contact a trained customer service representative through one of the following methods:
- TOLL-FREE CALL: 1-800-227-5757
- EMAIL: [email protected]
- MAIL: 6700 Tower Circle, Suite 1000
Franklin, TN 37067
Effective: January 1, 2023
Last Updated: July 1, 2023